$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json) Hash identifier: L8Cxoo48vxmZ0xs01ZRxkj3E6OpVXa+pFPJk85vT7Z4= Subject key identifier: 1B:85:1F:4E:CA:B0:2A:49:26:AF:7B:1E:4D:8A:B1:38:85:4A:8C:BF Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Certificate serial: 35B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft Manifest number: 3580 Signing time: Tue 10 Mar 2026 14:23:24 +0000 Manifest this update: Tue 10 Mar 2026 14:23:23 +0000 Manifest next update: Tue 17 Mar 2026 14:23:23 +0000 Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: GpcR+p2Uzeg8bYwicE+scWmG94Nwtti55y+0BJ8GSLc=) 2: 1BC70FAEDBF011F092B3F5D0536F56BC.roa (hash: Cb0WTT8AKl4UE3/5l6qXIuWV17KOgvKYJVQ6UOAz2fU=) 3: 42CB3D60E49611F098414B07486F56BC.roa (hash: SGAgqirlOlukBT4xNGwk4j92LJxLiy55yPX+tQxiKJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 14:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13753 (0x35b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Validity Not Before: Mar 10 14:23:23 2026 GMT Not After : Mar 17 14:23:23 2026 GMT Subject: CN=69b0295b-5743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:55:3a:98:40:6d:69:32:13:71:c9:e5:5c: 7d:eb:cc:6b:b1:36:da:f3:08:0a:10:d5:c6:b8:3a: a9:1c:46:58:aa:d8:42:3c:a2:fa:fa:c8:54:7c:17: fe:ee:78:c8:3b:d0:5a:f1:a1:25:83:8c:7e:99:4d: 4f:29:10:f6:35:2c:65:a1:65:73:fd:18:01:00:0e: 8d:73:f7:6b:2f:b6:8c:e6:fb:78:09:2d:c0:f7:3a: 8a:58:8c:33:29:04:10:b7:ba:dc:16:f7:38:ff:d5: 2c:e5:03:a6:39:bc:55:44:c9:e6:76:4d:fe:a2:df: df:a2:c9:ec:b0:96:56:03:89:53:c4:f0:00:d9:d9: ef:15:36:5d:a3:e4:7b:bd:a3:c7:6f:f1:e1:b6:09: cf:66:01:e3:23:f7:27:64:fe:2e:2f:5d:a8:82:0b: f3:c2:0e:3a:81:f6:4c:e1:df:c5:40:80:bc:2b:ba: 9c:14:f9:f1:27:ef:ae:4c:fc:11:9d:57:26:06:d9: 0c:21:5d:81:0e:15:9e:8f:a6:4f:c0:8d:16:93:f0: 0b:cb:6f:80:33:93:b5:19:64:cc:94:a1:26:ba:4d: 70:11:6c:9b:42:01:f9:01:54:47:a7:ee:da:ee:07: a6:1a:c4:a8:b2:00:7a:89:4a:ce:6c:ce:76:89:89: 8c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:85:1F:4E:CA:B0:2A:49:26:AF:7B:1E:4D:8A:B1:38:85:4A:8C:BF X509v3 Authority Key Identifier: keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c9:fd:33:71:5a:85:78:de:8c:5c:56:ad:77:d2:4c:23:64: 3b:fa:6d:e8:ca:cc:4e:3a:cd:0d:9a:27:67:0f:73:ef:10:95: 5e:d8:62:19:ae:21:d0:09:dd:5e:41:6c:f0:28:da:5a:24:c6: f3:fa:76:60:b3:56:40:47:dc:33:38:f8:d8:94:15:0f:83:97: c8:ac:64:64:1c:fb:b9:eb:b6:90:fc:68:bb:9f:48:9a:64:f9: 89:91:0a:3c:11:4a:16:82:0b:d4:30:a4:8b:f5:ee:8b:28:f5: 82:3a:df:c9:ce:ae:4f:9a:ab:77:dd:b1:7d:c7:11:75:ef:9d: 4b:bf:b6:8b:b8:c6:05:d8:3b:a3:e9:32:83:b3:00:a4:cb:c4: f4:a4:d0:db:a2:7b:2a:68:17:f9:d1:64:01:87:15:4e:d5:c7: 88:d8:d0:04:c3:2a:08:80:c3:67:70:f0:d1:7b:89:18:b7:d4: 8c:58:22:8f:ba:20:21:a4:b4:20:86:b6:53:0e:96:71:fc:18: 8d:45:98:9e:f8:33:13:ad:9f:19:85:5a:85:f2:ed:63:a7:71: 53:cc:47:e9:8a:c7:9c:22:c5:88:66:ed:33:b8:ed:33:3c:c0: f0:08:7f:c4:d6:03:c5:f4:6a:ea:03:91:5d:d5:9b:1d:62:13: 80:43:d1:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw QzJDRTQ5QjQwHhcNMjYwMzEwMTQyMzIzWhcNMjYwMzE3MTQyMzIzWjAYMRYwFAYD VQQDEw02OWIwMjk1Yi01NzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwlVOphAbWkyE3HJ5Vx968xrsTba8wgKENXGuDqpHEZYqthCPKL6+shUfBf+ 7njIO9Ba8aElg4x+mU1PKRD2NSxloWVz/RgBAA6Nc/drL7aM5vt4CS3A9zqKWIwz KQQQt7rcFvc4/9Us5QOmObxVRMnmdk3+ot/fosnssJZWA4lTxPAA2dnvFTZdo+R7 vaPHb/HhtgnPZgHjI/cnZP4uL12oggvzwg46gfZM4d/FQIC8K7qcFPnxJ++uTPwR nVcmBtkMIV2BDhWej6ZPwI0Wk/ALy2+AM5O1GWTMlKEmuk1wEWybQgH5AVRHp+7a 7gemGsSosgB6iUrObM52iYmM8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBuFH07K sCpJJq97Hk2KsTiFSoy/MB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEI5OS9EM0Y5MDUxQzFEODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBY c0Zid0t5ZVRRTk1NTE9TYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEsn9M3FahXjejFxWrXfSTCNkO/pt6MrMTjrNDZonZw9z7xCVXthiGa4h0And XkFs8CjaWiTG8/p2YLNWQEfcMzj42JQVD4OXyKxkZBz7ueu2kPxou59ImmT5iZEK PBFKFoIL1DCki/Xuiyj1gjrfyc6uT5qrd92xfccRde+dS7+2i7jGBdg7o+kyg7MA pMvE9KTQ26J7KmgX+dFkAYcVTtXHiNjQBMMqCIDDZ3Dw0XuJGLfUjFgij7ogIaS0 IIa2Uw6WcfwYjUWYnvgzE62fGYVahfLtY6dxU8xH6YrHnCLFiGbtM7jtMzzA8Ah/ xNYDxfRq6gORXdWbHWITgEPRHg== -----END CERTIFICATE-----Generated at Thu Mar 12 15:21:28 2026 by rpki-client